Apple TV (version 4)

The cable industry is on the cusp of saving billions of dollars annually buying and maintaining set-top boxes and cable modems if they can convince customers to buy their own instead.

Cable companies collectively spend as much as $10 billion a year on customer premise equipment (CPE), ranging from simple Digital Transport Adapters for older analog-only TV sets, to the most advanced cloud-based set-top boxes and DVRs.

Cable industry analyst Craig Moffett believes the cable industry will save a fortune and lose one as consumers buy their own set-top equipment like Apple TV or Roku boxes and buy their own modems to avoid monthly rental charges. That means cable companies will likely forfeit a considerable percentage of their leasing/rental revenue.

“The idea that customers will eventually consume video through their own Apple TV or Roku boxes, or simply connect their cable to their smart TVs, Xboxes and Sony PlayStations, is neither new nor far-fetched,” wrote Moffett. “There are good reasons to believe that CPE spending may come down significantly in future (product) generations.”

Most cable equipment is leased to customers and often installed by a cable operator that covers the costs of sending a truck to the customer’s home. After installation, the average American cable subscriber pays $89.16 a year renting a single cable box, and for those with multiple boxes and a DVR, those costs rise to $231.82 a year. A cable modem can be purchased for $50-90 on average, and usually pays for itself in less than one year of rental charges charged by many cable operators.

Comcast X1

Even with more capable consumer-targeted set tops like the latest Apple TV ($149-199) and Roku devices now approaching $100, it will not take long for consumers to recoup their money avoiding rental fees.

Cable operators like Time Warner Cable now carry the majority of their cable channels on apps accessible through devices like the Roku. Customers will not get the flashiest on-screen experience, but they do get a welcome alphabetical channel lineup and a reasonably good picture. Future generations of the boxes are expected to enhance usability and picture quality.

Cable operators like Charter stand to gain the most. If their merger with Time Warner Cable and Bright House Networks is approved, all three companies are expected to see reductions in equipment expenses estimated at $2.97 billion in 2015 to as little as $917 million by 2019, according to Moffett. Charter is already expecting to see its capital spending fall more than a billion dollars a year, from $6.97 billion to $5.83 billion by 2019, but consumers should not expect to see the savings passed on to them.

Cable operators can also expect considerable savings after fully deploying DOCSIS 3.1 technology that powers their broadband services. The next generation cable broadband platform offers increased efficiency and flexibility that will allow operators to sell faster speeds.

Comcast may stand apart from others believing deluxe set-top boxes like its X1 are urgently needed to keep cable TV customers satisfied. One of Comcast’s largest planned expenses is deploying millions more of these advanced platforms to customer homes in 2016.

ARRIS, one of the country’s largest suppliers of cable modems, is under scrutiny after a security researcher discovered not one, but two secret “backdoors” potentially affecting more than 600,000 of the company’s installed cable modems/home gateways that could allow hackers access to a customer’s equipment and home network.

Bernardo Rodrigues published a report of the exploits on his blog, which affect ARRIS cable modem models including TG862A, TG862G, and DG860A. Rodrigues reports only ARRIS and your local cable company can fix the security problems, and neither seem to be in much of a hurry.

The ARRIS Touchstone 860, which can be identified by its model number depicted on the front lower right of the modem.

“Securing cable modems is more difficult than other embedded devices because, on most cases, you can’t choose your own device/firmware and software updates are almost entirely controlled by your ISP,” Rodrigues writes. Indeed, very few cable modems allow users to self-update their equipment with the latest firmware. To guarantee uniformity, that privilege is given exclusively to the cable company providing service, even if a customer owns their own modem outright.

“ARRIS SOHO-grade cable modems contain an undocumented library (libarris_password.so) that acts as a backdoor, allowing privileged logins using a custom password,” Rodrigues writes. “The backdoor account can be used to enable Telnet and SSH remotely via the hidden HTTP Administrative interface “http://192.168.100.1/cgi-bin/tech_support_cgi” or via custom SNMP MIBs.”

While exploring the potential security damage that backdoor could permit, Rodrigues stumbled on a second, open to additional exploitation by hackers.

“The undocumented backdoor password is based on the last five digits from the modem’s serial number,” Rodrigues wrote. “You get a full busybox shell when you log on the Telnet/SSH session using these passwords.”

ARRIS TG862

In plainer language, one or both backdoors will allow a hacker to bypass the modem’s usual security protections and provide the intruder with full remote access to the affected cable modem. Hackers have likely already identified the security lapse and have exploited it, with some suspecting access key generators are already available allowing the user to automate attempts to reach affected modems on a significant scale.

Unfortunately for consumers, neither ARRIS or cable operators appear to be rushing to update the affected firmware to eliminate the backdoors, having waited more than two months just to acknowledge Rodrigues’ report.

For now, customers using these devices exclusively as cable modems are least likely to suffer a serious security lapse. More at risk are consumers relying on these three models as both a cable modem and home gateway providing Wi-Fi access around the home. Theoretically, hackers could use one or both exploits to gain access to your home network. Consumers using one of the affected models should contact their local cable company and ask them to replace the device with an alternative, preferably from a different manufacturer.

At least one cable company reported they are working with ARRIS to correct the flawed firmware, but early efforts have not been successful. It may be prudent for some security-conscious customers not to wait.

Time Warner Cable customers who purchased their own cable modems to avoid the company’s $8 monthly rental fee will effectively be forced to indirectly pay those fees once again if Charter Communications wins approval to buy the cable operator.

A major modem manufacturer, Zoom Telephonics, has asked the Federal Communications Commission to reject Charter’s buyout of Time Warner Cable and Bright House Networks because it will hurt cost-conscious consumers that invested in their own equipment to avoid costly modem rental fees.

Zoom’s argument is that Charter builds modem fees into the price of its broadband service and offers no discounts to consumers that own their own equipment. At least 14% of Time Warner Cable customers have purchased their own modems and are not charged the $8 rental fee. Charter has promised not to charge separate modem fees for three years after its acquisition deal is approved, but that also means the company is building the cost of that equipment into the price of broadband service.

Zoom has an interest in the outcome because Charter has yet to approve any Zoom cable modem model for use on its network. Time Warner Cable has certified at least one Zoom model in the past. Assuming the buyout is approved, consumers would have a disincentive to buy Zoom cable modems (or those manufactured by anyone else) because the equipment will be provided with the service.

Zoom has tangled with Charter before, most recently in the summer of 2014 when it criticized Charter’s policy forbidding new customers from using their own modems with Charter’s service. From June 26, 2012 until Aug. 22, 2014, Charter’s website stated, “For new Internet Customers and customers switching to our New Package Pricing, we will no longer allow customer owned modems on our network.”

Zoom claims Charter modified that policy three days before a key FCC filing deadline that could have eventually brought regulator attention on the cable operator. But Zoom remains unhappy with how Charter deals with the issue of customer-owned equipment.

“Charter has still not adopted certification standards that are open to Zoom and other cable modem producers, nor has Charter yet made a commitment for timely certifications under this program,” Zoom claimed in the summer of 2014. “Of the 17 cable modems Charter shows as qualified for customer attachment to its network, not one is stocked by leading cable modem retailers Walmart, Staples, and Office Depot and not one has 802.11ac wireless capability. Charter still does not separately list the cost of its leased modems on customer bills, and Charter does not offer a corresponding savings to all customers who buy a qualified cable modem and attach it to the Charter network.”

Zoom wants Charter to be required to offer consumers that own their own equipment a tangible monthly discount for broadband service as a condition of any merger approval.

“The Communications Act says that cable companies should sell cable modem leases and Internet service separately,” Andrew Jay Schwartzman, a professor at Georgetown University Law Center who is representing Zoom, told the Los Angeles Times. “By combining the prices, Charter’s customers are deprived of the ability to purchase advanced cable modems and save the cost of monthly rental fees.”

Charter argues the Act only covers set-top boxes used for cable television service, not modem fees. Charter also claims its introductory prices are lower than what most cable companies charge, modem fee or not.

“Customers will benefit from Charter’s pro-customer and pro-broadband model with transparent billing policies,” Tamara Smith, a Charter spokeswoman, told the newspaper. “It features straightforward, nationally uniform pricing with no data caps, no usage-based pricing, no modem fees, no early termination fees and does not pass on federal or state Universal Service Fund fees to customers.”

But Charter is only guaranteeing those customer-friendly policies for three years, after which it can raise prices and add fees at will.

Before and after competition

The best way to guarantee service upgrades from Comcast is to threaten to launch your own competing service provider, which is precisely what worked for the community of Santa Cruz, Calif., where Comcast suddenly found the resources to upgrade the local cable system to support speeds faster than 25Mbps.

For more than two years, customers and local governments across Santa Cruz County have been begging Comcast to upgrade the cable system that would have been state-of-the-art if it was still 1997. Customers could not exceed speeds of 25-28Mbps, but Comcast continued advertising its “Performance” tier (50Mbps), Blast! (105Mbps) and even Extreme option (150Mbps), collecting dozens of extra dollars a month from customers while their broadband speeds maxed out below 30Mbps.

The cable system is so antiquated, it could not officially support consistent service above 25Mbps, and many locals complain their speeds were slower than that.

“The most popular speed in this county is 16/2Mbps, which is the fastest one Comcast will actually give you what you paid for,” said Stop the Cap! reader Jim, who lives in Santa Cruz. “It’s so bad, people are actually envious of Charter, which services customers to the south.”

Ookla’s Net Speed Index rated the community of 62,000 447th fastest out of 505 California broadband-enabled cities.

Comcast’s performance was so bad, a frustrated employee began leaking internal company documents exposing the fact the cable system could not deliver speeds above 29Mbps, despite marketing and advertising campaigns selling customers more expensive, faster broadband local employees knew it could not deliver.

“We’ve been complaining to the company in Philadelphia for years, asking them to stop promising something they weren’t delivering,” a Comcast  technician told GoodTimes, a community newspaper. “But they ignored us.”

When customers complained, they were told their equipment was at fault or their cable modems needed to be replaced. In fact, the cable system’s local infrastructure needed to be upgraded, something Comcast has not done until recently.

This summer, the City of Santa Cruz joined forces with Cruzio, a California-based independent Internet Service Provider, to plan a new fiber to the home network within the city.

Under the terms of the partnership, the city will own the network, and Cruzio will act as the developer during engineering and construction and as the operator when the network is complete. Financing for the development of the network will be through city-backed municipal revenue bonds, repaid through the revenue from the sale of network services (and not by the taxpayers). The project will be financially self-sustaining and 100% of the profit generated will stay in the City of Santa Cruz.

Much of that money is likely to flow away from Comcast and into the community fiber provider, which will support speeds up to 1 gigabit. The announcement of impending competition inspired Comcast to upgrade its local cable infrastructure and the cable company suddenly announced service upgrades less than two months after the city announced their fiber project. In August, Comcast added 30 new channels, raised the speeds of two of its residential Xfinity Internet tiers at no additional cost to customers, and introduced four new tiers of Internet service for commercial business customers.

The Performance tier speed jumped overnight from 16/2Mbps to 75/5Mbps. Blast! speed increased from 25/4Mbps to 150/10Mbps.

For many local residents, it is too little, too late.

“Comcast can kiss me goodbye when Cruzio rolls into my neighborhood,” said Jim. “They ignored and overbilled us for years and the only time things changed is when competition was announced. Cruzio keeps their money here, Comcast sends it off to Philadelphia. If I have a problem, I know I’m going to get better service in person than dealing with Comcast’s customer service which has no idea where Santa Cruz even is.”

For Comcast customers who paid extra for Internet speeds they never received, company officials suggested they write a letter and ask for a refund, something Comcast will consider on a case-by-case basis.

“Comcast is a fundamentally deceitful company, at the leadership level,” responded local resident Charles Vaske. “They can not be trusted to stick to their word, and they certainly should not be trusted with infrastructure as vital as Internet access. A mere refund for this type of deceit is not appropriate, there should be severe penalties for such intentional crime.”

The “New and Improved” Don’t Care Bears

Rob Frieden has two words for Comcast customers getting scary letters and phone calls threatening to turn their legacy cable modems into paperweights: caveat emptor.

Frieden, author of Winning the Silicon Sweepstakes: Can the United States Compete in Global Telecommunications? knows enough to fend off the misinformation used to upsell customers away from the modems they own free and clear into Comcast’s rented $10/month alternative.

“Despite its commitment to improving its customer service, Comcast keeps writing and robocalling me with an offer I can refuse,” Frieden writes on his blog. “In a rather alarmist tone, Comcast wants subscribers to infer that their modem soon will no longer work.”

At issue are customers still using legacy DOCSIS 2.0 cable modems — one generation behind the current DOCSIS 3.0 modems Comcast wants customers to use. Frieden knows one day Comcast may decide to stop supporting DOCSIS 2.0, an older, less-capable cable broadband standard. Although that day is nowhere in view yet, it hasn’t stopped aggressive Comcast telemarketers from warning customers they “need upgraded equipment” that comes with a never-ending $10 a month rental fee.

“My Motorola DOCSIS 2.0 compliant modem works just fine and it cost me a princely $5 at a garage sale,” Frieden writes.

Frieden

As soon as Comcast finds out you are using an older modem you own, Frieden writes they may try to dissuade you from using it and push you towards their alternative.

“Comcast does not want you to know that the new rented modem will not provide any faster service unless you subscriber to a triple digit, high-end service tier,” Frieden adds.

Comcast’s official position is that DOCSIS 2.0 modems will work just fine with all Comcast Internet plans at speeds below 50Mbps. But they infer if you are not using a DOCSIS 3.0 modem (preferably theirs), “you won’t experience the blistering fast speeds now available.” That implies all Comcast customers with DOCSIS 2.0 modems will get less robust performance across the board, but in fact Comcast’s statement refers to the limitation DOCSIS 2.0 customers have upgrading to speeds they may never need.

After Comcast’s telemarketing machine has you convinced you need to upgrade to their perpetually profitable rented modem, they will also ask why not upgrade your router as well? Comcast suggests customers upgrade to at least a 802.11n model because older 802.11g routers only support up to 20Mbps.

“If you lease your modem, router, or gateway device from us, we’ll upgrade it at no extra charge,” Comcast claims, inferring the upgrade will come free. Except it isn’t. It just won’t cost you more than the $10 a month you are probably already paying.

Stop the Cap! readers regularly tell us Comcast often cuts corners and simply bills customers modem rental fees even for customer-owned equipment. Our reader Amanda is the latest victim and she is about fed up:

I took a look at my bill and for no reason Comcast suddenly started charging me $10 a month for a voice/data modem rental that I don’t have. Beware and check your bill thoroughly. Comcast sneaks charges on for services you don’t have. Absolutely hate this company. On top of the bogus $10 they raised all the rates so my bill went from $186 a month to $219 a month. I would never recommend Comcast to anyone. Horribly deceptive company. Oh and then there is the junk equipment that Comcast uses. I have had three X1 boxes replaced in a year. I’m thinking about going with U-Verse for TV and staying with Comcast for Internet.

Comcast’s “new and improved” customer service becomes especially hostile when customers like Amanda catch the company cheating, forcing her and others into lengthy investigations and appeals to get the bogus fees removed and earlier charges refunded:

So I talked with Comcast today and got nowhere. They basically don’t want my business after 18 years and are giving me a hard time about refunding me the charge for the modem. They said it will take at least 14 days for them to look into the issue with the modem being mine and not being leased from Comcast. I told them I want to cancel and they transferred me to a recording telling me how to send in my equipment via UPS. 18 years and they will not budge on changing my pricing without signing a two year contract! So after 40 minutes on the phone with them I am extremely mad and frustrated. Now I have to waste my time filing complaints with the Better Business Bureau and the attorney general. And even more time switching my services to another provider. It seems that Comcast has changed its tactics and now instead of trying to retain their customers they are saying go ahead and leave. And can only imagine the nightmare of returning all the equipment.

If you can’t prove your cable modem doesn’t belong to Comcast, they may conveniently bill you an unreturned equipment charge of $70, like one customer experienced in 2014.